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T iflt in fr »f claims: 
1-11. (cancelled) 

12 (currently amended) A method for verifying a signature for a message « in a data 
communication system established between a sender and a recipient, said sender ^generating 
masked signature components (r, s, c), where r is an integer derived from . coordinate of a firs, 
short term public key kP, s is a signature component derived by binding a second short term 
private key. the message m and short and long term private keys, and c is . second stature 
component obuined by combining said first and second short term private keys, sa,d n»thod 

comprising the steps of a verifier. 

a) obtainingapairofsignaturecomponentsaO.saidc^mponent, beingdenved 

from said first and second signature components generated by a signor; 

b) recovering a coordinate pair (x^y,) corresponding to said first short term public 
key kP using said pair (s,r) and said message m; 

c) calculating a signature component r' from one of said coordinate [[pairs]] mic 
and 

d) verifying said signature if r' m r. 

13 (previously presented) A method according to claim 12 further comprising the step of 
said verifier receiving (r, s, c) from said signor and converting (s, r, c) to obtain said pair ($, r) . 

14 (previously presented) A method according to claim 12 further comprising the step of 
said signor converting (s, r, c) to said pair (s,r) and said signor sending said pair (J,r) to said 
verifier. 
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(..'.y,) ^calculated using . pair of values . and v, said values . and » derived from satd patr ■ 

(s, r) and said message m. 

(x.'.y.) is calculated as (*,.») - uP + v S> wherein P is a point on an elliptic curve E and Q ,s a 
public verification key of said signor derived from P as Q - dP. 

17 (previously presented) A m«hod according to claim 15 wherein said value » is computed 
a5B = r'e m od n andsaidvaluevi,com l «.eda S v = r'rmod n ,ebeing»representat 1 onof; 

said message m. 

18. (previously presented) A method according to claim 17 wherein . is calculated as e = 
U(m), H( ) being a hash function of said signor and being known to said verifier. 

19. (previously presented) A method according to claim 12 wherein said coordinate * is first 
converted to an integer x, prior to calculating said component r' . 

20. (previously presented) A method according to claim 19 wherein said component f is 
calculated as r' - Xj mod n . 

21 (previously presented) A method according to claim 12 wherein prior to calculating skid 
component r' , said coordinate pair (x„y,) is first verified, whereby if said coordintte pair W.yO 
is a point at infinity, then said signature is rejected. 
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